CVE-2017-12459 The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a...
HighCVSS 7.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/binutils(Debian:12) | < 2.29-8 | 2.29-8 |
| debian/binutils(Debian:13) | < 2.29-8 | 2.29-8 |
| debian/binutils(Debian:14) | < 2.29-8 | 2.29-8 |
| GNU binutils | <= 2.29 | No fix listed |
References
- Debian Security Tracker CVE-2017-12459 vendor-advisory
- sourceware.org issue-tracking patch third-party-advisory